/usr/share/crypto-policies/DEFAULT
NameSizeModeActions
bind.txt1240644editdlrm
gnutls.txt30750644editdlrm
java.txt15520644editdlrm
javasystem.txt1530644editdlrm
krb5.txt1370644editdlrm
libreswan.txt5650644editdlrm
libssh.txt11650644editdlrm
nss.txt4090644editdlrm
openssh.txt13220644editdlrm
opensshserver.txt18040644editdlrm
openssl.txt1510644editdlrm
opensslcnf.txt7380644editdlrm
openssl_fips.txt490644editdlrm
rpm-sequoia.txt19790644editdlrm
Edit: /usr/share/crypto-policies/DEFAULT/nss.txt (409B)
library= name=Policy NSS=flags=policyOnly,moduleDB config="disallow=ALL allow=HMAC-SHA256:HMAC-SHA1:HMAC-SHA384:HMAC-SHA512:CURVE25519:SECP256R1:SECP521R1:SECP384R1:aes256-gcm:chacha20-poly1305:aes256-cbc:aes128-gcm:aes128-cbc:SHA256:SHA384:SHA512:SHA224:ECDHE-RSA:ECDHE-ECDSA:RSA:DHE-RSA:ECDSA:ED25519:RSA-PSS:RSA-PKCS:tls-version-min=tls1.2:dtls-version-min=dtls1.2:DH-MIN=2048:DSA-MIN=2048:RSA-MIN=2048"